Oktober 2020 - FIM4L - lists3.daasi.de

Fwd: InCites now requires users to supply email address and create a new set of credentials
by Davide Vaghetti 09 Nov '20

09 Nov '20

Hello everyone, I've sent this message to the FOG mailing list about Clarivate's InCites additional registration flow, but some Colleagues suggested that FIM4L would have been a better venue for the topic. Regards, Davide -------- Forwarded Message -------- Subject: InCites now requires users to supply email address and create a new set of credentials Date: Wed, 7 Oct 2020 19:18:52 +0200 From: Davide Vaghetti <davide.vaghetti(a)garr.it> To: fog(a)lists.refeds.org Hello everyone, some IdP admins and Librarians alerted us about Clarivate's InCites requiring an additional users registration after the Institutional login. The flow is similar to what Elsevier introduced in sciencedirect, but then rolled back, last year: - it starts on https://incites.clarivate.com - a user select "Sign in" and then "Institutional (Shibboleth) Sign In" - once the authN flow is finished, the user is requested to register an email address and then to set a password to access InCites As in the case of Elsevier, the above has not been anticipated in any way from Clarivate, which so far was letting users in with just a transient nameid and ePSA. Regards, Davide -- Davide Vaghetti Consortium GARR Tel: +390502213158 Mobile: +393357779542 Skype: daserzw

7 11

FIM4L news
by Jos Westerbeke 28 Okt '20

28 Okt '20

Hello everyone, It has been time for an informative message for a while. But now here it is! FIM4L is a non-profit initiative led by libraries which includes creating recommendations for configuring federated SSO authentication for library e-resources. With a special focus on privacy. The LIBER working group<https://libereurope.eu/strategy/research-infrastructures/fim4l/> (The EU part and currently base of FIM4L) has done some great work behind the scenes. - Final version Recommendations - We're happy to announce the publication<https://zenodo.org/record/4118124#.X5Ka00Izbly> of FIM4L's recommendations! Yesterday, it's published on Zenodo<https://zenodo.org/record/4118124#.X5GqWUIzblx> (Open Science platform) as an official LIBER(400+ EU libraries) publication. It's a new graphically updated version including an infographic of the two main recommendations to choose from: 4.A and 4.B named as Transitory Access and Personalized Access. We had to choose up to three editors, for citing purposes. (Peter G. Jiri and me) But authors are many of you, as we already have listed on the website. Thanks to everyone making this possible! You can find this version also on the FIM4L website<https://www.fim4l.org/?page_id=257>. Click on PDF. - Website - We have a new website. The website is hosted at HEAL-LINK<https://www.heal-link.gr/en/home-2/>. (Thanks, Leonidas.) We have our own logo. (Thanks, Peter, DAASI.) Please take a look at FIM4L.org<https://www.fim4l.org/>. It's all done for free, thanks to many dedicated volunteers like you, who just like their work;) - Talks with Elsevier - Several members of the LIBER working group are involved in talks with Elsevier. Elsevier is working on a project which includes the drafting of privacy principles for federated authentication. They asked FIM4L to be a sounding board. We represented the FIM4L principles which was appreciated. All just started and we'll let you know the progress. - SeamlessAccess.org - The FIM4L recommendations align with the entity categories<https://seamlessaccess.org/posts/2020-07-08-entitycategories/> developed by Seamless Access: "Anonymous Authorization" matches with FIM4L recommendation 4.A and "Pseudonymous Authorization" with 4.B. Thank you both SA and FIM4L representatives for the cooperation! - Consultation for Cambridge University Press - Cambridge University Press (CUP) requested recommendations regarding institutional sign in. Recommendations were discussed within FIM4L working group, passed to CUP and we are waiting for a feedback from CUP. - Approaching Clarivate regarding InCites - Bad federated authentication practices were spotted by several federation operators at Clarivate InCites. Recommendations are discussed within the FIM4L working group currently and will be passed to Clarivate. - Webinar - At Wednesday, November 25, 2020, 3:00 PM - 4:00 PM (Amsterdam) we will have a webinar<https://www.anymeeting.com/AccountManager/RegEv.aspx?PIID=EF55D889804C30> hosted by LIBER. Welcome! (Please register<https://www.anymeeting.com/AccountManager/RegEv.aspx?PIID=EF55D889804C30>) Kind regards, Jos Jos Westerbeke Library IT Specialist/manager | Erasmus University Rotterdam, Library | Burgemeester Oudlaan 50 | 3062PA Rotterdam | jos.westerbeke(a)eur.nl<mailto:jos.westerbeke@eur.nl> | +31 640295513

2 1

intro
by Davide Vaghetti 14 Okt '20

14 Okt '20

Hello everyone, my name is Davide Vaghetti, I work for GARR and I'm currently leading the Italian Identity Federation IDEM and I'm also working in the GEANT GN4-3 project as the eduGAIN Service owner. I've joined because I'm interested in the topics and I have something I'd like to share with the FIM4L community. I consent that my name is published on the FIM4L website. Cheers, Davide -- Davide Vaghetti Consortium GARR Tel: +390502213158 Mobile: +393357779542 Skype: daserzw

2 1

Fwd: InCites now requires users to supply email address and create a new set of credentials
by Davide Vaghetti 09 Okt '20

09 Okt '20

Hello everyone, I've sent the message below to the FOG mailing list about Clarivate's InCites additional registration flow, but then some Colleagues suggested that FIM4L would have been a better venue for the topic. I'm eager to have your opinions on the subject. Regards, Davide -------- Forwarded Message -------- Subject: InCites now requires users to supply email address and create a new set of credentials Date: Wed, 7 Oct 2020 19:18:52 +0200 From: Davide Vaghetti <davide.vaghetti(a)garr.it> To: fog(a)lists.refeds.org Hello everyone, some IdP admins and Librarians alerted us about Clarivate's InCites requiring an additional users registration after the Institutional login. The flow is similar to what Elsevier introduced in sciencedirect, but then rolled back, last year: - it starts on https://incites.clarivate.com - a user select "Sign in" and then "Institutional (Shibboleth) Sign In" - once the authN flow is finished, the user is requested to register an email address and then to set a password to access InCites As in the case of Elsevier, the above has not been anticipated in any way from Clarivate, which so far was letting users in with just a transient nameid and ePSA. Regards, Davide -- Davide Vaghetti Consortium GARR Tel: +390502213158 Mobile: +393357779542 Skype: daserzw

2 1